This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File:                     3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier:          tNKB+7zkafvY2qxc9VW2/TUrmjUZgssHCCmpJbJ4kG8=
Subject key identifier:   15:CB:7F:E7:2F:1F:45:4C:3E:03:22:B0:E5:4C:A2:24:F8:D2:3D:25
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer:       /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial:       019B2475AFDBE9BAA0691DA29202B4388BCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number:          01A0
Signing time:             Tue 16 Dec 2025 00:00:50 +0000
Manifest this update:     Tue 16 Dec 2025 00:00:50 +0000
Manifest next update:     Wed 17 Dec 2025 00:00:50 +0000
Files and hashes:         1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: +TDkFfWB/y11NhAnnklqK+4DDvry6jLxFlR1IFxFV4c=)
                          2: Q4iWZ496HCNmYZBIWBOYyxR29Uc.roa (hash: 7wrmL3IIhgsOUmrN36LQ1NncM+5WHq2SxfG9P1s/Hs8=)
                          3: elJZVsJM-cu186hJqa3wLJ-HvIY.roa (hash: ARy/RhAUZB3gjAcZcQ/EM7MONeLO821NzwpDjV1Ze2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:75:af:db:e9:ba:a0:69:1d:a2:92:02:b4:38:8b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
        Validity
            Not Before: Dec 16 00:00:50 2025 GMT
            Not After : Dec 17 00:00:50 2025 GMT
        Subject: CN=15cb7fe72f1f454c3e0322b0e54ca224f8d23d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:35:14:3f:9a:c6:83:dc:17:93:e7:d5:64:a8:
                    dc:03:4e:96:b7:a8:5a:fd:1d:51:86:a8:a7:d9:e2:
                    0b:43:24:d2:6c:29:40:36:3c:76:6d:42:67:63:3d:
                    98:bc:81:4b:b8:8f:36:c0:19:47:51:5b:6f:b6:14:
                    17:75:94:b3:9f:33:48:1e:08:ff:63:fc:a7:ca:56:
                    9a:49:89:12:ae:3d:b9:9c:e6:b7:06:4a:14:f0:90:
                    6c:1a:ca:df:4a:bb:dd:bf:d5:10:85:ae:cd:2d:7c:
                    3d:76:68:33:87:e8:14:de:d6:1f:4d:7c:98:66:40:
                    23:62:8d:33:fb:68:4d:b2:16:1a:71:15:af:49:f0:
                    55:dc:26:25:fd:f5:45:46:49:e2:5a:5d:60:05:d0:
                    25:df:14:b6:3c:f4:e1:97:96:70:61:98:75:6c:ea:
                    26:16:46:10:e1:b7:cf:d2:c8:2f:33:d2:9c:30:5c:
                    4c:c9:95:c0:f2:6f:12:a1:4e:86:cd:1f:c9:36:4a:
                    d3:b0:3a:19:5f:77:68:81:ed:7c:4a:77:9b:86:a1:
                    fb:15:3a:10:51:b7:fe:50:8f:2c:d0:60:2c:0f:97:
                    2f:9f:67:d1:9d:30:00:40:78:a3:cf:9c:7c:ab:a5:
                    5b:3f:50:c8:84:4b:9d:6d:79:0e:70:32:27:c0:67:
                    17:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CB:7F:E7:2F:1F:45:4C:3E:03:22:B0:E5:4C:A2:24:F8:D2:3D:25
            X509v3 Authority Key Identifier:
                keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9a:83:63:5e:7a:1f:a0:24:39:df:22:ce:f8:46:15:8c:cf:
         f0:0b:8a:fc:23:cf:9a:e1:51:0d:c1:b4:f7:ea:b0:25:1c:2d:
         29:f6:67:9b:e6:24:c1:8c:b6:a5:1d:58:de:ce:27:af:94:c1:
         c4:25:0b:00:a0:f7:ee:66:a5:52:b8:e1:c8:27:51:07:69:76:
         6e:e7:61:56:3b:ca:24:a1:a8:17:0a:a3:c7:21:21:55:5c:01:
         da:02:33:96:e9:5d:77:b7:37:eb:1a:df:27:6b:49:3f:e0:4d:
         85:c0:6d:9a:94:72:c5:2f:39:a8:62:4c:3d:a5:37:e0:fb:57:
         be:ef:96:ee:cc:4a:ea:80:bc:0b:ea:84:e6:19:ee:79:6e:05:
         79:11:02:a6:b9:85:e2:5b:60:ee:a0:15:a3:d9:6b:8b:7b:dc:
         24:e0:f1:08:bd:ff:d0:1d:64:b9:e7:b0:85:e9:13:9b:8d:be:
         98:bb:6c:74:2a:32:be:36:b9:df:c1:7c:98:f9:b5:f2:2f:8a:
         e4:ac:1b:a1:93:90:99:c4:16:65:91:f5:48:1b:42:2f:2f:26:
         d7:61:f2:85:f6:86:5a:dd:6a:48:ba:da:1f:8f:1f:ca:37:92:
         a1:86:f4:92:dc:aa:00:9a:3f:83:49:df:be:e6:ae:ee:ba:63:
         62:1f:3f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 07:30:26 2025 by rpki-client